Slashdot Mirror


User: Nevyn

Nevyn's activity in the archive.

Stories
0
Comments
753
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 753

  1. Re:Contribution made to OpenSSH or OpenBSD? on Mozilla Foundation Donates $10K to OpenSSH · · Score: 1
    Again, there's no clear separation between OpenBSD and the OpenSSH subproject. The whole idea is like telling a C++ programmer that you want him to work on function foo(), but not class Bar which it's a part of.

    And that's what we're complaining about ... it is trivial (and generally accepted to be a good thing) to seperate them. Instead of having openssh-portable be the bastard offspring, make it the real upstream and then integrate it into the OS.

    There's no reason they can't create a real project for something used this much. To use your analogy, when the class is called "String" and your function within it is called "extract_email_mime_base_64()" you should seriously consider WTF you are doing.

  2. Re:Taxation? What are you talking about? on NPR & The Modern Media Distribution · · Score: 1
    NPR = unbiased? Interesting thought...

    Yeh, but still ... slightly right wing is still OK to listen to in the car.

  3. Re:Jobs's salary on Apple Officially Releases Beta Dual Boot Loader · · Score: 1
    Options are the ability to purchase shares at a certain price, usually much much lower than current market value.

    Every option package I've seen gives you options to buy at the current price. By the time you can sell them all (4-5 years later) there may well be a big difference between the option price and the share price, but that's because the share price went up for everyone.

  4. Re:Unsafe Languages? on Secure Programming in GNU/Linux Systems: Part I · · Score: 1
    He does have a point, though. It *is* possible to use the standard C library string functions in a safe manner

    It's possible for non-trivial applications? Can you provide an example then? I can provide a few examples that basically never use the std. str* functions, and are considered safe by their authors.

    Saying C itself is unsafe, can be argued against (although what they generally mean is things like the apache-httpd malloc() attack are possible, while they aren't in Java -- although, again, that was inside a crappy str* string helper so would have gone away if apache-httpd used a half decent string API).

  5. Re:Interesting study on incompetence on Misconfigured Webserver, Threats to Call FBI · · Score: 1
    The median is just the middle number of the series (not middle number of the unique possible numbers.)

    You're right, and I knew that ... I just somehow managed to uniquify the data before I thought about it. Slashdot really needs a [X] "What I said was moronic" checkbox. Ahh well, more sleep/caffine needed.

  6. Re:Interesting study on incompetence on Misconfigured Webserver, Threats to Call FBI · · Score: 0, Troll
    The median and the mode are both 2, but the average is 1.98 or so.

    No, the median (assuming a total distribution of: 0 legs, 1 leg and 2 legs) would be 1 leg. The mode would certainly be 2. Also s/average/mean/.

  7. Re:Why do you think you need a license? on DDoS Attacks Via DNS Recursion · · Score: 1
    Why do you think you need a license? Copyright law doesn't impose ANY restrictions on what you do with something you've downloaded. It only stops you from making copies.

    As I'm sure you know Rick Moen has an informative text on this. IMO you'd have to be insane not to have a license on software you are using for SMTP/DNS (Ie. speaking directly with the outside world).

    But, hey, you're free to be insane. Just don't act surprised when people don't want to join you for a glass of kool-aid.

  8. Re:Does this matter with TCP/IP offload and iWarp? on Better Networking with SCTP · · Score: 1
    TCP/IP offload NICs (TOE) are becoming increasingly more popular. [...] This technology is being adopted by both the MS and Linux camps so it seems to have a good shot.

    Err, no. TSO (TCP Segmentation Offload -- DMA IO for the network) has been adopted by the Linux people, TOE (TCP Offload Engine -- half the TCP stack is now in hardware) has been completely rejected by the Linux people, multiple times ... and has basically zero chance of ever happening.

    The good thing, is that it doesn't help ... so noone will care.

  9. Re:ms is already open on Microsoft Keeps Eye on Open-Source Prize · · Score: 1

    To be fair, most Linux distributions I install fail to recognize themself in other partitions.

  10. Re:Non-object oriented test tools? on Test Coverage Leading You Astray? · · Score: 1
    but regardless, I'm looking for a completely cross-platform compiler-independent and build-system-independent test framework.

    For C?! ... yeh, I'm looking for a flying car too. So if you let me know when you find what you want that'll help, as I have a feeling they'll be in the same place.

  11. Re:The eyes are looking at the edges on Another Look At Mozilla's BugFix Rate · · Score: 2, Interesting

    You are talking about things that _you_ want, and I can even mostly agree. However it has been proven repeatedly that only a very small minority are willing to put security/quality before other design trade offs ... things might well get better in the next 10 years due to python/C#/etc. not having as significant downsides. But even so we are going to be stuck with C based programs for a long time, and there are still very few people who want to pay to do even the minimal fixes.

    Again, I'm not saying I wouldn't like to do that trade off, indeed I wrote my own secure Web server (with a monetary guarantee you won't be owned) because I didn't like apache-httpd ... but there just isn't the general buying power to bring secure software out of the niche.

  12. Re:Non-object oriented test tools? on Test Coverage Leading You Astray? · · Score: 1
    I'd love to hear from anyone who can recommend test coverage tools for C

    You want gcc with "-fprofile-arcs -ftest-coverage", then you can use gcov/ggcov/lcov to produce usable output. See Vstr and And-httpd for examples.

  13. Re:I'm a Shaw BT user on BitTorrent and End to End Encryption · · Score: 1
    I REALLY REALLY wish that people who wanted to download TV shows, movies, apps, music, warez, etc. would use USENET. [...] Sadly, Rogers no longer offers Usenet services because they are really cheap and greedy

    So you admit that only a very small percentage use Usenet, and because of the design the traffic isn't proportional to how may people want to download (Usenet traffic is over 1TB a day now, for a full feed). Then you combine this with the fact that even the news readers that are "better" at downloading 700MB "files" are still pretty crappy compared to say a bittorrent tracker.

    Given that, why would you possibly recommend that people should switch to Usenet, it's a terrible model. A much more sane idea would be to have bittorrent proxies (like HTTP proxies), so when multiple people from an ISP want the latest Fedora ISO the tracker can direct them to an ISP run bittorrent app. and nothing goes outside the network that doesn't need to.

  14. Re:Linux didn't really advance computing ... on Microsoft Licensing Fee Intended To Reduce Hobbyists · · Score: 1

    The comment you initially replied to said:

    And remember, it's the HOBBYISTS who've done more to advance computing than anything Microsoft has done to advance the state of software development in the world.

    So even if you give FreeBSD almost all of the OS "innovation" (which is just as absurd as giving it none) ... it is still firmly in the Hobbyist camp.

  15. Re:* is the killer linux app on Interview with Mark Spencer of Asterisk · · Score: 1
    Extensions live in the Asterisk configuration. You _can_ break your Asterisk config this way and make it unstartable.

    Interesting ... there's no way to move this to a DB? When you restart * does that drop all the current phone lines?

  16. Re:A vote for uTorrent on BitTorrent Clients Reviewed · · Score: 1
    Unix (and unix-likes) design philosophy is to use a lot of small, efficient programs in concert to do larger tasks.

    I think not:

    • cat -n vs. nl
    • ed vs. vi
    • emacs
    • mv --reply vs. yes
    • ls -R and cp -R vs. find
    • ls --sort and ls --reverse vs. sort
    • ls --escape and ls --hide-control-chars vs. tr
    • ls -B and ls -a and ls -I vs. grep
  17. Re: OK for one guy, but not the other? on Two Groups File Domestic Spying Lawsuits · · Score: 1
    The difference between a suspected terrorist and a known terrorist can only be truly known after surveillance ... (or after acts have been committed)

    The same can be said of any criminal offence, and indeed that is a well used excuse by police state governments . I would suggest that if you wish to live under the rule of such a government you would kindly move to one of the currently available ones, rather than helping change the government I'm living under. Thanks.

  18. Re: OK for one guy, but not the other? on Two Groups File Domestic Spying Lawsuits · · Score: 1
    I find it intensely interesting that people will [...] villify the recording of phone conversations of people who have known links to terrorist organizations.

    You misspelt "ignoring congressional refusal of presidential powers" and accidentally substituted the word "known" for the word "suspected". HTH.

  19. Re:Paul Graham on Web 3.0 · · Score: 1
    so at a certain point you're just reading above-average prose written by some guy with an interesting sounding opinion, no more.

    Can you expect more than that from anyone? Certainly saying that on /. with a straight face is impressive.

    I don't generally read bloggers; there's too much good mainstream writing (eg, New Yorker, New Republic, Economist) to dig around on the internet for some belly-button gazer.

    "Too much good mainstream writing" ... ENOPARSE. I think the reason so many of us are reading blogs is not that they are always amazingly insightful, but that "above-average" is so much better than anything in the mainstream.

  20. Re:Realities of patching. on Microsoft Taking Longer to Fix Flaws · · Score: 1
    The UNIX philosophy has always been and remains: "Do one thing and do it well."

    IT has? Why does cat have like 6 different options then, including numbering lines (which we also have nl for). Why did we move on from ed to vi? And then move on to xemacs?:) -- I still read my email in xemacs/gnus. One word: perl. Another one word: apache-httpd (this one is esp. close to my heart as I wrote my own webserver because apache-httpd had way to many options/bugs).

  21. Re:VB for the 21st Century on Departure Of The Java Hyper-Enthusiasts? · · Score: 1

    You're talking about using processes and shared memory right? Oh, you're not ... you are under the impression that "share everything, and hope" is somehow near "share X, in a well defined way". I would hope you are perfect, but having seen the bug ridden crap that multi-threading advocates produce ... I'm just not that much of an optimist.

  22. Re:The Real Irony on Steve Jobs thinks Objective C is Perfect? · · Score: 1
    That's because Apple really does flush to disk when you call fflush().

    The man pages disagree: http://www.osxfaq.com/man/3/fflush.ws

  23. Re:Clients are becoming too smart on The Future of HTML · · Score: 1
    It's enlightening run to your browser with JavaScript turned off

    Well as someone who runs with JS off all the time on my primary browser, it is sad ... but not that bad. 95% of the web that I use still works with generic html+CSS.

    The worst offenders are often the shops, which I assume is so they can "validate" the form before sending it ... but I often get around this by just getting whatever from amazon instead. Personally I'd recommending this as the default, although you'd probably want something like the firefox plugin to let you allow your bank or that ship that is the only place that sells X etc. to be morons.

  24. Re:too far? on Sun Open-Sourcing UltraSPARC Design · · Score: 1

    I thought libm was glibc based, but according to: this it's FreeBSD based ... but whatever, it's certainly very different from the binary blob you get from Sun, which was the main point.

    As for SunONE Studio 10 compiler being better than GCC, well, how about I take a bit of number crunching code and compile it on Opteron with both GCC and SunONE Studio 10 and see which runs faster

    You did read what I said right? "By every measurable comparison" is not the same thing as x% faster at number crunching code. Sure llnl.gov might like it, but personally I'll stick with decent warnings. If it wasn't for the semi useful first comment I'd assume you were trolling.

  25. Re:too far? on Sun Open-Sourcing UltraSPARC Design · · Score: 1
    Absolutely. All of the components under the CDDL are open.

    Wow, impressive misdirection. Yes, all the open bits are open. However you still can't build an OS with what Sun have released. Joerg Schilling seems to be comming the closest, by using Linux bits for the missing pieces ... and even he is having problems because he can't even build non-debug kernels (so performance is "not supported").

    Some of these issues will probably be worked out in time, but to say the Solaris is completely OSS now just isn't true. And frankly to suggest that a single vendor that has been shipping bits of their own large static-block of code under an OSS license for a few weeks is the same as multiple vendors shipping a modular community OS for years is just Sun PR.

    Sun offers the Sun ONE Studio tools for free. Vastly superior to GCC in every measurable way.

    By "every measureable" I assume you mean performance of binary output on Sparc. Certainly the "how to compile Solaris code on GCC" articles from Sun lead me to believe that the Sun compilers accept utter crap and have a huge hill to climb to get to gcc -Wall -Wextra levels of usefulness.